Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e2037393232.roa
File:                     3135322e38392e38382e302f32322d3232203d3e2037393232.roa (raw, json)
Hash identifier:          w7V5WkG+nywVum/f/6B7apqWGh55vxWK6e4TDFUqg3U=
Subject key identifier:   BA:11:E8:1E:52:9F:F8:C4:9E:C5:DC:AC:BE:77:FC:BD:01:C1:D3:1C
Certificate issuer:       /CN=170584c3c22a791b9369e669afe83ce83dacc0ea
Certificate serial:       6080AB8BBEACE804149CB05FFAD0409A1ED46711
Authority key identifier: 17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e2037393232.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     7922
IP address blocks:        152.89.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:80:ab:8b:be:ac:e8:04:14:9c:b0:5f:fa:d0:40:9a:1e:d4:67:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170584c3c22a791b9369e669afe83ce83dacc0ea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:14:65:75:c2:6c:96:26:44:82:0b:c1:5e:
                    42:68:50:33:c3:e6:06:19:90:3e:4b:3d:10:19:aa:
                    5c:0e:ac:bb:73:17:d4:cb:6c:3c:35:cd:eb:f3:c8:
                    92:cd:21:09:8d:d1:52:e4:4b:6e:8d:b9:f9:da:c0:
                    86:a7:39:1f:0c:86:40:75:03:06:86:ff:23:55:1a:
                    16:52:49:74:a8:05:75:37:05:98:6c:e7:17:6b:9b:
                    b7:9b:58:6d:37:49:ec:aa:c7:d7:c3:b8:61:90:3b:
                    03:0a:5b:d1:e5:24:fa:8d:09:e9:cf:41:12:d1:b2:
                    30:5d:81:09:05:b3:52:c4:76:0e:66:5b:2b:ed:9b:
                    35:19:1b:e6:f8:f7:d3:15:3b:b2:62:41:50:0c:be:
                    07:1e:50:e2:cf:64:bd:2e:2b:24:cf:b6:19:f8:bc:
                    3f:2c:28:38:9e:91:0d:8d:39:3c:81:2d:b2:3a:ab:
                    43:98:51:59:ea:63:10:3f:3b:6d:34:07:7b:6a:29:
                    a1:32:8b:3e:91:08:c0:c6:f0:4d:b8:ac:f0:a1:78:
                    7c:6f:24:da:f6:64:2a:3a:25:d5:ea:49:30:1b:ad:
                    6b:02:22:65:0d:7f:de:a7:4f:61:dd:df:13:25:4f:
                    f9:6a:2f:e8:76:82:22:27:b0:cc:0b:de:b8:c6:47:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:11:E8:1E:52:9F:F8:C4:9E:C5:DC:AC:BE:77:FC:BD:01:C1:D3:1C
            X509v3 Authority Key Identifier:
                keyid:17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/170584C3C22A791B9369E669AFE83CE83DACC0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:1c:0c:f6:e8:9b:aa:f1:1a:9d:5a:ee:64:e0:3a:12:45:
         21:00:d6:8c:c5:79:1c:6b:73:8b:25:9d:c6:c6:dd:78:86:09:
         4f:d8:a4:2b:5d:04:ab:1c:38:f0:db:80:50:95:0e:ec:99:7a:
         11:51:15:d1:6d:6d:6c:e3:f6:12:56:c3:d2:2f:53:34:6a:c9:
         2d:07:0e:fd:f2:4e:9d:28:5c:5d:5c:7d:a8:1d:59:b1:31:c7:
         7a:61:d9:db:4e:d2:03:74:bc:f6:c3:71:e3:ab:e5:22:22:97:
         5e:36:62:4c:7d:76:83:cf:a6:b1:9b:5f:94:b4:df:28:7d:83:
         5a:1a:ac:97:6b:be:1f:84:65:45:80:91:b5:82:eb:1e:a4:e7:
         5b:8b:eb:78:66:d5:80:21:02:ae:74:03:68:50:45:c5:eb:99:
         01:9c:18:fd:e9:9e:65:91:1f:5f:ab:74:48:89:c0:f5:43:f8:
         70:3a:ef:7a:2d:58:cf:93:5a:cf:74:4c:6f:aa:1d:d1:ab:fc:
         47:64:2c:96:04:73:7b:53:3b:2b:5d:59:7a:96:a5:36:15:a8:
         98:38:21:99:df:03:e4:7c:d5:3e:75:86:8e:40:8a:bf:e7:8b:
         2e:4e:24:e3:c8:bd:62:e7:f6:ce:d1:2a:19:0f:70:3a:75:45:
         a1:99:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----